azure-landing-zone-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could serve as a vector for indirect prompt injection.
- Ingestion points: The skill reads uploaded
.xlsxExcel checklists and parses user-provided IP documentation in various formats (Markdown, CSV, Excel, or text). - Boundary markers: There are no explicit instructions or delimiters defined to ensure the agent ignores or isolates natural language instructions that might be embedded within the checklist cells or documentation files.
- Capability inventory: The skill utilizes the
openpyxllibrary for file system write operations (saving the updated Excel workbook) and performs local data processing. It does not demonstrate network exfiltration or arbitrary command execution capabilities in its defined workflow. - Sanitization: The instructions do not specify any validation, filtering, or sanitization of the content extracted from the input files before it is processed or written back to the checklist.
Audit Metadata